An accounting firm stores financial data for many customers. The company policy requires that employees only access data for customers they are assigned to$.$ The company implements a written policy indicating an employee can be fired for violating this requirement.

Which type of control has the company implemented?

Detective

Deterrent

Active

Preventive